[Shahid-BugB]

Tool requirements

• The tool is at least six months old. (Repository created 2026-02-21.)
• The tool has at least 20 GitHub stars. (20 on 2026-11-11.)
• The tool has more than one contributor. (Five human contributors listed by the GitHub contributors API.)
• The description is no longer than 500 characters. (497.)
• I have not changed README.md directly.

AI tags, if applicable

• uses-llm: optional threat reports call a configured LLM provider (Anthropic, OpenAI, Google, OpenRouter, DeepSeek or local Ollama), and guardlink annotate / guardlink translate launch the user's coding agent. The core checks (validate, lint, diff, paths) are deterministic and make no model calls.
• ai-generated-code: not applied.

About the tool

GuardLink (MIT, npm guardlink, Node 18+) is a continuous threat-modeling-as-code framework. Security annotations in source comments (@asset, @threat, @exposes, @mitigates, @flows) form the threat model. GuardLink parses them, validates them, lints and diffs them against the base branch in CI, and exports SARIF. guardlink paths walks the annotated flow graph and reports routes from an untrusted entry point to a sink with no control on the way, citing file:line for each hop. It tracks which claims are verified, unverified or stale, and it turns open exposures into test templates (for CERT-X-GEN) so they can be proven.

• Source: https://github.com/Bugb-Technologies/guardlink
• Homepage: https://guardlink.bugb.io/
• Docs: https://docs.bugb.io/guardlink/

Note: the star count is exactly at the 20 threshold, and the age check uses the repository creation date.

Disclosure: I'm involved with GuardLink development at Bugb Technologies.

🤖 Generated with Claude Code

[github-actions]

Contributing criteria check

[PASS] GuardLink

Source: https://github.com/Bugb-Technologies/guardlink

Criterion	Result
Stars (min 20)	pass 20 stars
Human contributors (min 2)	pass 5 human contributors
Age (min 6 months)	pass created 263 days ago (at least 6 months)

---

All tool eligibility criteria passed. Thank you for your contribution.